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What is claimed is: 



1. Amethod for facilitating authentication of a scrvic, comprising ±e steps of . 

aflrs x n8areTO 

searching a list of aliases associated with the service; 

enabHng a second party making the request to access the service if a match is found 
between the first abas and at least one alias of the list of aliases - 



The method of claim 1 wherein the first party is a domain 



controller. 



3 The meth0(1 of claim 2 wherejn ^ domain 
service and a Global Catalog Service. 



4. Tie memod of claim , wherein the authentication of the service is provided 

via Kerberos. F 



5. The method of claim 1 wherein the aliases are Service Principal Names. 

6. The method of claim 5 wherein the Service Principal Names further comprise 
- -east one of a Service Type, an Stance Name, a Port Number, a Service Name and a 

Domain. 



7. The method of claim 5 wherein the Service Principal Names are associated 
with an account related to a server. 
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8. The method of claim 7 wherein the step of searching a list of aliases further 
comprises the steps of: 

searching the account for an associated Service Principal name; and 
providing name cannonicalization by returning a ticket related to the account. 

9. A domain controller for facilitating a client authenticating a server, 
comprising: 

a system for providing a plurality of aliases which the client may employ to 
authenticate to the server. 

1 0. A system for facilitating a client authenticating a server, comprising: 

a domain controller operatively coupled to the client and server, the domain controller 
providing a plurality of aliases which permit the client to authenticate the server via at 
least one of the aliases. 

11. A system for facilitating authentication of a service, comprising: 
means for receiving a request for authentication of the service from a client, the 

request including a first alias; 

means for searching a list of aliases associated with the service; 

means for enabling the client to access the service if a match is found between the 
first alias and at least one alias of the list of aliases. 

12. The system of claim 1 1 further including a means for generating an implicit 
list facilitating automatic creation of Service Principal Names. 

13. The system of claim 12 further including a means for constraint checking in 
order to prevent authentication to an unauthorized server. 

14. The system of claim 13 wherein the means for constraint checking includes a 
Host Name and an attribute. 
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15. The system of claim 14 wherein the means for constraint checking includes 
having a means for determining if a server is authentic by matching the Host Name with the 
attribute. 

16. A system for facilitating authentication of a service, comprising: 

a domain controller for receiving a request for authentication of the service from a 
client, the request including a first alias; 

wherein the domain controller searches a list of aliases in an account associated with 
the service; 

wherein the domain controller enables the client to access the service via a ticket if a 
match is found in the account between the first alias and at least one alias of the list of 
aliases. 

17. The system of claim 16 wherein the aliases are Service Principal Names. 

18. The system of claim 17 wherein the Service Principal Names further comprise 
at least one of a Service Type, an Instance Name, a Port Number, a Service Name and a 
Domain. 

19. The system of claim 16 further including an implicit list to facilitate automatic 
creation of Service Principal Names. 

20. The system of claim 1 9 further including constraint checking in order to 
prevent authentication to an unauthorized server. 

21 . The system of claim 20 wherein the constraint checking includes a Host Name 
and an attribute. 

22. The system of claim 21 wherein the constraint checking includes determining 
if a server is authentic by matching the Host Name with the attribute. 
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23. The system of claim 16 further including a referral service for directing the 
client to another domain. 

24. The system of claim 23 wherein the domain the client is directed to may refer 
the client to another domain. 

25. The system of claim 16 wherein improved security is provided for replicated 
services by including the name of the replicated service within a Service Principal Name. 
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